Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/4ca610d2-b410-3eaa-a4a3-ff161a44fe95.roa
File:                     4ca610d2-b410-3eaa-a4a3-ff161a44fe95.roa (raw, json)
Hash identifier:          ULGxvYB10wu8z244oI6EInII/ml2qCQ2odee1Xo3Dkg=
Subject key identifier:   CD:E3:D3:A8:83:11:0D:FF:97:D2:9D:6D:55:3A:E1:E4:B4:5B:B8:72
Certificate issuer:       /CN=73c38a7d-2b5c-432c-9da0-79bcf96780c3
Certificate serial:       010D0C9F4328584CDC86C11212B47D6D591B5BE0
Authority key identifier: 92:6D:02:56:A1:1D:28:99:4E:BB:2C:91:8B:9D:BD:F0:34:78:CC:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/4ca610d2-b410-3eaa-a4a3-ff161a44fe95.roa
Signing time:             Sat 14 Feb 2026 15:03:59 +0000
ROA not before:           Sat 14 Feb 2026 15:03:59 +0000
ROA not after:            Fri 15 May 2026 14:03:59 +0000
asID:                     6079
IP address blocks:        172.111.58.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/73c38a7d-2b5c-432c-9da0-79bcf96780c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/73c38a7d-2b5c-432c-9da0-79bcf96780c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:dc:86:c1:12:12:b4:7d:6d:59:1b:5b:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73c38a7d-2b5c-432c-9da0-79bcf96780c3
        Validity
            Not Before: Feb 14 15:03:59 2026 GMT
            Not After : May 15 14:03:59 2026 GMT
        Subject: CN=32a77362-a065-487a-81f1-59256dca598c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:eb:11:b9:4b:75:56:71:7b:90:ed:8b:9e:47:
                    59:b6:ab:48:13:e3:69:9c:28:f8:87:57:4a:42:8f:
                    c0:2c:f2:d6:48:8f:d8:f1:3c:13:23:ad:f5:f0:a2:
                    93:2f:24:0e:eb:87:79:33:f3:17:ca:a0:d7:13:8a:
                    9f:70:ad:a1:15:71:23:4a:55:18:38:7c:75:58:75:
                    0c:df:51:e1:3b:63:34:3f:ce:f0:f5:37:10:b0:c3:
                    79:15:51:c1:54:56:79:3b:dc:40:86:3f:67:89:b7:
                    eb:5c:ea:e9:ac:11:93:d1:75:f0:15:13:2a:c1:19:
                    99:c2:5f:39:19:75:72:f7:61:c8:81:44:80:8f:02:
                    86:45:fc:7a:ed:05:e1:a3:47:29:e0:35:a2:ab:28:
                    e5:99:1d:45:74:e1:d4:ea:ee:fa:67:8d:a3:94:b3:
                    38:eb:f1:bc:99:64:d0:32:5f:04:4c:79:ad:7f:ac:
                    a1:75:e6:38:01:03:70:28:3b:a7:75:f7:a9:48:eb:
                    7b:09:88:4c:ed:7b:e9:8a:8c:ab:63:2b:0c:03:90:
                    d7:e5:5f:de:2b:9a:a1:3b:49:ae:9a:90:e6:5c:d7:
                    69:4d:f3:a6:1f:87:86:00:1a:2f:86:cf:0c:b3:c3:
                    c3:db:2e:ae:f4:83:9f:34:30:8f:a5:81:3f:fb:08:
                    f8:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:E3:D3:A8:83:11:0D:FF:97:D2:9D:6D:55:3A:E1:E4:B4:5B:B8:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/4ca610d2-b410-3eaa-a4a3-ff161a44fe95.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/73c38a7d-2b5c-432c-9da0-79bcf96780c3.crl

            X509v3 Authority Key Identifier:
                keyid:92:6D:02:56:A1:1D:28:99:4E:BB:2C:91:8B:9D:BD:F0:34:78:CC:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.111.58.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:cf:0f:08:ab:ac:86:40:e0:57:67:98:67:8c:c6:cf:34:54:
         71:e5:1b:5e:60:6b:ec:f2:2d:45:48:55:08:f1:dc:c2:11:06:
         71:f4:25:ac:8d:03:aa:ec:74:2d:32:98:6b:8d:01:2e:84:cf:
         b9:fa:0f:03:30:79:2a:87:a7:e9:40:18:f8:34:95:fd:9b:ed:
         70:20:bf:c4:f0:11:a6:d3:de:5d:00:05:22:a6:b7:89:65:53:
         9f:b9:d7:cf:dd:7c:84:4e:15:5c:f5:3a:17:bf:a7:f0:ec:9c:
         6a:6b:06:81:16:5d:59:73:f2:83:37:27:db:72:c0:08:f2:90:
         9d:01:2d:ad:54:1e:75:fa:8f:fb:eb:e8:cb:ca:4e:e0:0e:2e:
         43:17:dc:e6:77:8b:1b:24:f3:06:0a:25:3a:04:fa:a1:a1:8f:
         da:f0:be:af:17:f5:5a:de:81:da:63:90:91:c5:76:3c:59:ec:
         64:cb:81:18:a2:87:9e:e5:8f:2e:70:ed:b9:26:f2:63:a2:86:
         10:db:57:04:54:1e:10:26:e3:b3:b4:7a:8a:42:b6:03:76:ac:
         df:24:74:ed:e1:1f:ff:57:7a:5b:85:a2:85:2e:7c:d5:46:65:
         29:3c:37:c1:b6:ac:b7:90:ed:06:78:1f:34:d1:69:53:58:9f:
         8e:c8:c7:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:18:21 2026 by rpki-client